Business Process: Supplier Compliance Check

START
  |
  |- [Task: 2000] New Supplier Registration Submitted
  |   Team: Procurement
  |   Description:
  |   A new supplier has submitted their registration data via the portal. Initial data quality check is required.
  |   |-- [Event: 10] Data Complete (Registration data appears complete) --> [Task: 2100] Initial Risk Screening
  |   |-- [Event: 20] Data Incomplete (Critical data missing) --> [Task: 2900] Request Completion
  |   |-- [Event: 30] Reject (Clearly non-compliant or irrelevant supplier) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2100] Initial Risk Screening
  |   Team: Compliance
  |   Description:
  |   Automated and manual screening for country sanctions, PEP lists, and basic financial health. Determine risk category (Low/Medium/High).
  |   |-- [Event: 10] Low Risk (Passed automated checks, non-critical industry) --> [Task: 2200] Document Collection
  |   |-- [Event: 20] Medium Risk (Flagged in partial checks or medium-risk industry) --> [Task: 2250] Enhanced Due Diligence
  |   |-- [Event: 30] High Risk (Sanction flag, high-risk country, critical industry) --> [Task: 2400] Compliance Committee Review
  |
  |- [Task: 2200] Document Collection
  |   Team: Supplier Master Data
  |   Description:
  |   Request and collect mandatory compliance documents (e.g., ISO certificates, business license, tax registration, bank details).
  |   |-- [Event: 10] All Documents Received (Documents uploaded by supplier) --> [Task: 2300] Document Verification
  |   |-- [Event: 20] Reminder Sent (Supplier did not provide all documents) --> [Task: 2200] Document Collection
  |   |-- [Event: 30] Non-Responsive (Supplier did not react within timeframe) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2250] Enhanced Due Diligence
  |   Team: Compliance
  |   Description:
  |   Conduct in-depth background checks, request additional financial statements, and assess sustainability practices.
  |   |-- [Event: 10] Due Diligence Passed (Assessment positive) --> [Task: 2200] Document Collection
  |   |-- [Event: 20] Due Diligence Concerns (Unclear findings or minor issues) --> [Task: 2400] Compliance Committee Review
  |   |-- [Event: 30] Due Diligence Failed (Critical issues found) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2300] Document Verification
  |   Team: Quality & Compliance
  |   Description:
  |   Validate authenticity and expiry dates of submitted documents. Check for consistency with registration data.
  |   |-- [Event: 10] Verified & Valid (All documents are valid and authentic) --> [Task: 2500] Final Approval
  |   |-- [Event: 20] Document Invalid (Forgery or major discrepancy found) --> [Task: 2990] Registration Rejected
  |   |-- [Event: 30] Update Required (Document expired or needs clarification) --> [Task: 2900] Request Completion
  |
  |- [Task: 2400] Compliance Committee Review
  |   Team: Compliance Committee
  |   Description:
  |   Formal review meeting for medium/high-risk suppliers or cases with due diligence concerns. Final risk assessment and decision.
  |   |-- [Event: 10] Approved (Committee grants approval, possibly with conditions) --> [Task: 2200] Document Collection
  |   |-- [Event: 20] Approved with Conditions (Specific actions required from supplier) --> [Task: 2450] Monitor Conditions
  |   |-- [Event: 30] Rejected (Committee rejects the supplier registration) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2450] Monitor Conditions
  |   Team: Compliance
  |   Description:
  |   Track and verify that the supplier fulfills the conditions set by the Compliance Committee (e.g., audit, implementation of a code of conduct).
  |   |-- [Event: 10] Conditions Met (Supplier fulfilled all requirements) --> [Task: 2500] Final Approval
  |   |-- [Event: 20] Conditions Not Met (Supplier failed to meet requirements in time) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2500] Final Approval
  |   Team: Procurement Lead
  |   Description:
  |   Final activation of the supplier in the master data system. Supplier receives compliant status and is eligible for contracts.
  |   |-- [Event: 10] Activate Supplier (Supplier activated in system) --> [Task: 2800] Supplier Active
  |
  |- [Task: 2800] Supplier Active
  |   Team: System
  |   Description:
  |   Supplier is approved and active. Process is completed. Periodic re-screening will be triggered automatically.
  |   |-- [Event: 10] Add Comment (Notes for master data) --> [Task: 2800] Supplier Active
  |
  |- [Task: 2900] Request Completion
  |   Team: Supplier Master Data
  |   Description:
  |   Request missing or updated information/documents from the supplier. Set a deadline for response.
  |   |-- [Event: 10] Information Provided (Supplier submits requested data) --> [Task: 2100] Initial Risk Screening
  |   |-- [Event: 20] Reminder Sent --> [Task: 2900] Request Completion
  |   |-- [Event: 30] No Response (Deadline passed) --> [Task: 2990] Registration Rejected
  |
  |- [Task: 2990] Registration Rejected
  |   Team: Procurement
  |   Description:
  |   Supplier registration has been rejected due to non-compliance, incomplete data, or failed checks. Supplier is informed.
  |   |-- [Event: 10] Archive Record (Process data archived) --> [Task: 2999] Closed
  |   |-- [Event: 20] Appeal Received (Supplier files an appeal) --> [Task: 2400] Compliance Committee Review
  |
  |- [Task: 2999] Closed
  |   Team: System
  |   Description:
  |   The compliance check process for this supplier is closed (either active or rejected).
  |
END
  |
  |- [Task: 2999] Closed
  |